com.originalpictures.vpdq.1
vPDQ video fingerprint: Original Pictures' deployment of vPDQ by Meta (ThreatExchange), with its own parameters, calibration and match threshold.
- Match threshold op.vpdq.query-share-0.40.v1
- Encoded media types: video/mp4
- Registration requested with the C2PA soft binding algorithm list
Identity
| Field | Value |
|---|---|
Algorithm identifier (alg) | com.originalpictures.vpdq.1 |
| Type | Fingerprint |
| Decoded media type | Video |
| Encoded media types | video/mp4 |
| Underlying algorithm | vPDQ by Meta (ThreatExchange) |
| Provider identity and version | com.meta.vpdq threatexchange-baefb4e-1s-q50-d31 |
API value (fingerprint_algorithms) | vpdq (computed when a request names it) |
| Calibration | op.vpdq.calibration.v1 |
| Match threshold | op.vpdq.query-share-0.40.v1 |
| Runtime revisions | op.video-bindings.mm05.1 |
| Licences | Code: BSD (facebook/ThreatExchange LICENSE). Weights: n/a (no learned weights). |
Pinned artefacts
Every file the runtime loads or builds from is pinned by SHA-256; a file with any other hash is refused.
| File | Kind | SHA-256 | Size | Source |
|---|---|---|---|---|
threatexchange-source.tar.gz | source | 7eb03276c7def45d4e4dd0fbcee233fac2f85d24f269e73f1e3fbdcdbee509c6 | not recorded | source |
How the fingerprint is computed
The PDQ hash, with its 0-100 quality, of one decoded frame per second at full resolution (every n-th frame, n the whole frame rate), on the same PDQ port as com.originalpictures.pdq.1.
| Parameter | Value |
|---|---|
| Implementation | ThreatExchange vpdq at baefb4ed, on the PDQ port |
| Frames | one per 1 s, full resolution |
| Frame quality | frames below 50 are not used to match |
| Keyed | No |
How matching works
A query matches when at least 40% of its frames of quality 50 or more have a stored frame within a Hamming distance of at most 31 of 256 bits. A fingerprint is compared only with fingerprints of the same algorithm, calibration and threshold, within the account that signed the file. Frame-level PDQ; matches partial clips; a 10% border crop breaks it.
What a positive result means
A match means the file looks or sounds like a file the signer's account signed, closely enough to pass the threshold above. It points to that file's C2PA manifest, which declares its origin. It is a probabilistic lead, not cryptographic proof: a fingerprint matches similar content, can miss heavily edited copies, and says nothing about whether the content is true. The signed manifest, where it survives, is the proof.
Measured performance
On Original Pictures' 2026 fingerprint benchmark (method vPDQ), at the production threshold, which corresponds to a query-level false-match rate of 1%, 57.7% of transformed copies (95% interval 55.9% to 59.5%) were matched to their original, over the benchmark's transformations of its fixed corpus (re-encoding, resizing, cropping and overlays, and the edits typical of the media type). These are measurements on a fixed corpus, not a guarantee for every file.
The value a soft-binding assertion would carry
- Value: One 37-byte record per hashed frame (big-endian 32-bit frame index, 8-bit quality, 32-byte PDQ hash) in frame order, as base64: the bytes Original Pictures stores.
- Scope: The whole clip; each record carries its own frame index.
- Encoding note: The C2PA schema defines a soft-binding value as a byte string. Original Pictures' signing engine writes it as text, as it already does for the ISCC binding, so the form above is the text a manifest would carry.
- Emission: Planned after the identifier is assigned.
How to check a file
- Content Credentials. Any C2PA-aware validator can read and check the manifest of a file that still carries one, without calling Original Pictures.
- The fingerprint. Fingerprint recovery runs inside a verification:
POST /v1/verificationson the Original Pictures API. When no manifest can be read, the verification compares the file's fingerprints with the recorded ones and reports a single match as recovery-only (VALIDATION_RECOVERY_ONLY), never as cryptographic validity; several plausible matches fail closed as ambiguous. Recovery searches only the bindings of the account that runs the verification. See lookup and recovery and fingerprints. - There is no public soft-binding resolution API. A hosted verify page does not check MP4 video today, so a third party cannot run this fingerprint through one. Otherwise, contact the signer or us.
- Comparing values yourself. vPDQ is public, so once the value is in a manifest anyone can hash a candidate's frames and compute the same share.
Relation to C2PA
When a fingerprint algorithm has an identifier on the C2PA soft-binding algorithm list, the manifest can carry a c2pa.soft-binding assertion that names it in its alg field. Registration for com.originalpictures.vpdq.1 has been requested with the C2PA soft binding algorithm list; no identifier has been assigned yet. Until one is, and until Original Pictures ships the change that writes it, no manifest names this fingerprint: it is a server-side recovery signal only. Today the one fingerprint a manifest carries is ISCC Image-Code (io.iscc.v0). This page is the entry's informational URL.
Status and contact
- Status: registration requested with the C2PA soft binding algorithm list.
- Contact: hello@originalpictures.com
- Last updated: 2026-11-08. The values on this page are generated from the production registry.
- All Original Pictures soft-binding algorithms